syzbot


possible deadlock in shmem_mfill_atomic_pte

Status: auto-closed as invalid on 2020/07/16 10:10
Reported-by: syzbot+9534ad2ef393afb278cf@syzkaller.appspotmail.com
First crash: 1557d, last: 1557d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream possible deadlock in shmem_mfill_atomic_pte mm C done 82 1492d 1544d 15/27 fixed on 2020/06/18 13:57
linux-4.14 possible deadlock in shmem_mfill_atomic_pte 1 1521d 1521d 0/1 auto-closed as invalid on 2020/08/21 02:08

Sample crash report:
gfs2: not a GFS2 filesystem
========================================================
WARNING: possible irq lock inversion dependency detected
4.19.111-syzkaller #0 Not tainted
--------------------------------------------------------
syz-executor.5/15786 just changed the state of lock:
000000001c03ef5c (&(&info->lock)->rlock){+...}, at: spin_lock include/linux/spinlock.h:329 [inline]
000000001c03ef5c (&(&info->lock)->rlock){+...}, at: shmem_mfill_atomic_pte+0x1657/0x2180 mm/shmem.c:2353
but this lock was taken by another, HARDIRQ-safe lock in the past:
 (&(&(&mapping->i_pages)->xa_lock)->rlock){-.-.}


and interrupts could create inverse lock ordering between them.


other info that might help us debug this:
 Possible interrupt unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&(&info->lock)->rlock);
                               local_irq_disable();
                               lock(&(&(&mapping->i_pages)->xa_lock)->rlock);
                               lock(&(&info->lock)->rlock);
  <Interrupt>
    lock(&(&(&mapping->i_pages)->xa_lock)->rlock);

 *** DEADLOCK ***

2 locks held by syz-executor.5/15786:
 #0: 000000001ce11e5c (&mm->mmap_sem){++++}, at: __mcopy_atomic mm/userfaultfd.c:464 [inline]
 #0: 000000001ce11e5c (&mm->mmap_sem){++++}, at: mcopy_atomic+0x18e/0x2780 mm/userfaultfd.c:608
 #1: 00000000483d8bfe (&(ptlock_ptr(page))->rlock#2){+.+.}, at: spin_lock include/linux/spinlock.h:329 [inline]
 #1: 00000000483d8bfe (&(ptlock_ptr(page))->rlock#2){+.+.}, at: shmem_mfill_atomic_pte+0x15bb/0x2180 mm/shmem.c:2340

the shortest dependencies between 2nd lock and 1st lock:
 -> (&(&(&mapping->i_pages)->xa_lock)->rlock){-.-.} ops: 1333742 {
    IN-HARDIRQ-W at:
                      __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
                      _raw_spin_lock_irqsave+0x8c/0xbf kernel/locking/spinlock.c:152
                      test_clear_page_writeback+0x1cb/0x13f5 mm/page-writeback.c:2725
                      end_page_writeback+0x21f/0x4d0 mm/filemap.c:1252
                      end_buffer_async_write+0x524/0x800 fs/buffer.c:348
                      end_bio_bh_io_sync+0xe2/0x130 fs/buffer.c:2981
                      bio_endio+0x432/0x7c0 block/bio.c:1780
                      req_bio_endio block/blk-core.c:278 [inline]
                      blk_update_request+0x30c/0xb30 block/blk-core.c:3109
                      scsi_end_request+0x7d/0xb10 drivers/scsi/scsi_lib.c:673
                      scsi_io_completion+0x283/0x1840 drivers/scsi/scsi_lib.c:1102
                      scsi_softirq_done+0x336/0x3d0 drivers/scsi/scsi_lib.c:1758
                      __blk_mq_complete_request block/blk-mq.c:583 [inline]
                      blk_mq_complete_request+0x3ab/0x660 block/blk-mq.c:620
                      virtscsi_vq_done+0xb7/0x170 drivers/scsi/virtio_scsi.c:223
                      vring_interrupt+0x119/0x160 drivers/virtio/virtio_ring.c:950
                      __handle_irq_event_percpu+0x144/0x8e0 kernel/irq/handle.c:149
                      handle_irq_event_percpu+0x76/0x160 kernel/irq/handle.c:189
                      handle_irq_event+0xa2/0x12d kernel/irq/handle.c:206
                      handle_edge_irq+0x24b/0x8c0 kernel/irq/chip.c:797
                      generic_handle_irq_desc include/linux/irqdesc.h:155 [inline]
                      handle_irq+0x35/0x50 arch/x86/kernel/irq_64.c:87
                      do_IRQ+0x93/0x1c0 arch/x86/kernel/irq.c:246
                      ret_from_intr+0x0/0x1e
                      __sanitizer_cov_trace_const_cmp1+0x4/0x20 kernel/kcov.c:174
                      filemap_map_pages+0x4ef/0x1200 mm/filemap.c:2679
                      do_fault_around mm/memory.c:3642 [inline]
                      do_read_fault mm/memory.c:3676 [inline]
                      do_fault mm/memory.c:3810 [inline]
                      handle_pte_fault mm/memory.c:4041 [inline]
                      __handle_mm_fault+0x2f62/0x3b60 mm/memory.c:4165
                      handle_mm_fault+0x1a5/0x670 mm/memory.c:4202
                      __do_page_fault+0x5ed/0xdd0 arch/x86/mm/fault.c:1390
                      page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1204
    IN-SOFTIRQ-W at:
                      __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
                      _raw_spin_lock_irqsave+0x8c/0xbf kernel/locking/spinlock.c:152
                      test_clear_page_writeback+0x1cb/0x13f5 mm/page-writeback.c:2725
                      end_page_writeback+0x21f/0x4d0 mm/filemap.c:1252
                      ext4_finish_bio+0x5b1/0x890 fs/ext4/page-io.c:118
                      ext4_end_bio+0x179/0x600 fs/ext4/page-io.c:342
                      bio_endio+0x432/0x7c0 block/bio.c:1780
                      req_bio_endio block/blk-core.c:278 [inline]
                      blk_update_request+0x30c/0xb30 block/blk-core.c:3109
                      scsi_end_request+0x7d/0xb10 drivers/scsi/scsi_lib.c:673
                      scsi_io_completion+0x283/0x1840 drivers/scsi/scsi_lib.c:1102
                      scsi_softirq_done+0x336/0x3d0 drivers/scsi/scsi_lib.c:1758
                      __blk_mq_complete_request block/blk-mq.c:583 [inline]
                      blk_mq_complete_request+0x3ab/0x660 block/blk-mq.c:620
                      virtscsi_vq_done+0xb7/0x170 drivers/scsi/virtio_scsi.c:223
                      vring_interrupt+0x119/0x160 drivers/virtio/virtio_ring.c:950
                      __handle_irq_event_percpu+0x144/0x8e0 kernel/irq/handle.c:149
                      handle_irq_event_percpu+0x76/0x160 kernel/irq/handle.c:189
                      handle_irq_event+0xa2/0x12d kernel/irq/handle.c:206
                      handle_edge_irq+0x24b/0x8c0 kernel/irq/chip.c:797
                      generic_handle_irq_desc include/linux/irqdesc.h:155 [inline]
                      handle_irq+0x35/0x50 arch/x86/kernel/irq_64.c:87
                      do_IRQ+0x93/0x1c0 arch/x86/kernel/irq.c:246
                      ret_from_intr+0x0/0x1e
                      __write_once_size include/linux/compiler.h:220 [inline]
                      __sanitizer_cov_trace_pc+0x47/0x50 kernel/kcov.c:109
                      constant_test_bit arch/x86/include/asm/bitops.h:317 [inline]
                      ipv4_confirm+0x77/0x3f0 net/netfilter/nf_conntrack_proto.c:442
                      nf_hook_entry_hookfn include/linux/netfilter.h:119 [inline]
                      nf_hook_slow+0xba/0x1e0 net/netfilter/core.c:511
                      nf_hook include/linux/netfilter.h:244 [inline]
                      NF_HOOK include/linux/netfilter.h:287 [inline]
                      ip_local_deliver+0x31f/0x4f0 net/ipv4/ip_input.c:256
                      dst_input include/net/dst.h:453 [inline]
                      ip_rcv_finish+0x1d8/0x2e0 net/ipv4/ip_input.c:414
                      NF_HOOK include/linux/netfilter.h:289 [inline]
                      NF_HOOK include/linux/netfilter.h:283 [inline]
                      ip_rcv+0xd0/0x3d0 net/ipv4/ip_input.c:524
                      __netif_receive_skb_one_core+0xf5/0x160 net/core/dev.c:4947
                      __netif_receive_skb+0x27/0x1c0 net/core/dev.c:5059
                      process_backlog+0x233/0x7c0 net/core/dev.c:5841
                      napi_poll net/core/dev.c:6264 [inline]
                      net_rx_action+0x4ab/0xfc0 net/core/dev.c:6330
                      __do_softirq+0x26c/0x93c kernel/softirq.c:292
                      do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1091
                      do_softirq.part.0+0x10f/0x160 kernel/softirq.c:336
                      do_softirq kernel/softirq.c:328 [inline]
                      __local_bh_enable_ip+0x20e/0x270 kernel/softirq.c:189
                      local_bh_enable include/linux/bottom_half.h:32 [inline]
                      rcu_read_unlock_bh include/linux/rcupdate.h:721 [inline]
                      ip_finish_output2+0x990/0x1740 net/ipv4/ip_output.c:231
                      ip_finish_output+0x721/0xcd0 net/ipv4/ip_output.c:317
                      NF_HOOK_COND include/linux/netfilter.h:278 [inline]
                      ip_output+0x1fb/0x5f0 net/ipv4/ip_output.c:405
                      dst_output include/net/dst.h:447 [inline]
                      ip_local_out+0xaf/0x170 net/ipv4/ip_output.c:124
                      ip_send_skb+0x3e/0xe0 net/ipv4/ip_output.c:1446
                      udp_send_skb.isra.0+0x6c2/0x11f0 net/ipv4/udp.c:845
                      udp_sendmsg+0x1df1/0x25d0 net/ipv4/udp.c:1132
                      udpv6_sendmsg+0x1499/0x2a00 net/ipv6/udp.c:1221
                      inet_sendmsg+0x12e/0x590 net/ipv4/af_inet.c:798
                      sock_sendmsg_nosec net/socket.c:622 [inline]
                      sock_sendmsg+0xcf/0x120 net/socket.c:632
                      ___sys_sendmsg+0x3e2/0x920 net/socket.c:2115
                      __sys_sendmmsg+0x195/0x470 net/socket.c:2210
                      __do_sys_sendmmsg net/socket.c:2239 [inline]
                      __se_sys_sendmmsg net/socket.c:2236 [inline]
                      __x64_sys_sendmmsg+0x99/0x100 net/socket.c:2236
                      do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
                      entry_SYSCALL_64_after_hwframe+0x49/0xbe
    INITIAL USE at:
                     __raw_spin_lock_irq include/linux/spinlock_api_smp.h:128 [inline]
                     _raw_spin_lock_irq+0x5b/0x80 kernel/locking/spinlock.c:160
                     spin_lock_irq include/linux/spinlock.h:354 [inline]
                     __add_to_page_cache_locked+0x44c/0xc50 mm/filemap.c:879
                     add_to_page_cache_lru+0x19d/0x810 mm/filemap.c:928
                     do_read_cache_page+0x8ef/0x1700 mm/filemap.c:2818
                     read_mapping_page include/linux/pagemap.h:402 [inline]
                     read_dev_sector+0xbb/0x430 block/partition-generic.c:671
                     read_part_sector block/partitions/check.h:38 [inline]
                     adfspart_check_ICS+0x115/0xe60 block/partitions/acorn.c:366
                     check_partition+0x3a2/0x6b4 block/partitions/check.c:167
                     rescan_partitions+0x21d/0x990 block/partition-generic.c:535
                     bdev_disk_changed+0x191/0x1d0 fs/block_dev.c:1435
                     __blkdev_get+0xb2f/0x14f0 fs/block_dev.c:1526
                     blkdev_get+0xad/0x910 fs/block_dev.c:1628
                     register_disk block/genhd.c:636 [inline]
                     __device_add_disk+0xa6d/0x1020 block/genhd.c:713
                     add_disk include/linux/genhd.h:408 [inline]
                     brd_init+0x295/0x461 drivers/block/brd.c:525
                     do_one_initcall+0xf1/0x734 init/main.c:883
                     do_initcall_level init/main.c:951 [inline]
                     do_initcalls init/main.c:959 [inline]
                     do_basic_setup init/main.c:977 [inline]
                     kernel_init_freeable+0x4c9/0x5bb init/main.c:1144
                     kernel_init+0xd/0x1c0 init/main.c:1061
                     ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
  }
  ... key      at: [<ffffffff8b6f0ca0>] __key.50898+0x0/0x40
  ... acquired at:
   shmem_uncharge+0x24/0x270 mm/shmem.c:319
   __split_huge_page mm/huge_memory.c:2487 [inline]
   split_huge_page_to_list+0x22f8/0x2d00 mm/huge_memory.c:2749
   split_huge_page include/linux/huge_mm.h:146 [inline]
   shmem_unused_huge_shrink+0x791/0x1370 mm/shmem.c:527
   shmem_unused_huge_scan+0x7a/0xb0 mm/shmem.c:559
   super_cache_scan+0x352/0x480 fs/super.c:108
   do_shrink_slab+0x3c7/0xa20 mm/vmscan.c:537
   shrink_slab_memcg mm/vmscan.c:602 [inline]
   shrink_slab+0x44f/0x550 mm/vmscan.c:681
   shrink_node+0x2e6/0x1350 mm/vmscan.c:2740
   shrink_zones mm/vmscan.c:2969 [inline]
   do_try_to_free_pages+0x3a3/0x1090 mm/vmscan.c:3027
   try_to_free_mem_cgroup_pages+0x2ef/0x8b0 mm/vmscan.c:3325
   reclaim_high.constprop.0+0xac/0x100 mm/memcontrol.c:2163
   mem_cgroup_handle_over_high+0x84/0x120 mm/memcontrol.c:2188
   tracehook_notify_resume include/linux/tracehook.h:195 [inline]
   exit_to_usermode_loop+0x1d6/0x2b0 arch/x86/entry/common.c:167
   prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
   syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
   do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296
   entry_SYSCALL_64_after_hwframe+0x49/0xbe

-> (&(&info->lock)->rlock){+...} ops: 318165 {
   HARDIRQ-ON-W at:
                    __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
                    _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:144
                    spin_lock include/linux/spinlock.h:329 [inline]
                    shmem_mfill_atomic_pte+0x1657/0x2180 mm/shmem.c:2353
                    shmem_mcopy_atomic_pte+0x3a/0x50 mm/shmem.c:2391
                    mfill_atomic_pte mm/userfaultfd.c:424 [inline]
                    __mcopy_atomic mm/userfaultfd.c:558 [inline]
                    mcopy_atomic+0x1019/0x2780 mm/userfaultfd.c:608
                    userfaultfd_copy fs/userfaultfd.c:1734 [inline]
                    userfaultfd_ioctl+0x4dd/0x3ac0 fs/userfaultfd.c:1884
                    vfs_ioctl fs/ioctl.c:46 [inline]
                    file_ioctl fs/ioctl.c:501 [inline]
                    do_vfs_ioctl+0xcda/0x12e0 fs/ioctl.c:688
                    ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
                    __do_sys_ioctl fs/ioctl.c:712 [inline]
                    __se_sys_ioctl fs/ioctl.c:710 [inline]
                    __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
                    do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
                    entry_SYSCALL_64_after_hwframe+0x49/0xbe
   INITIAL USE at:
                   __raw_spin_lock_irq include/linux/spinlock_api_smp.h:128 [inline]
                   _raw_spin_lock_irq+0x5b/0x80 kernel/locking/spinlock.c:160
                   spin_lock_irq include/linux/spinlock.h:354 [inline]
                   shmem_getpage_gfp+0x240d/0x3840 mm/shmem.c:1849
                   shmem_getpage mm/shmem.c:132 [inline]
                   shmem_write_begin+0x108/0x1e0 mm/shmem.c:2433
                   generic_perform_write+0x1f8/0x4d0 mm/filemap.c:3162
                   __generic_file_write_iter+0x24c/0x610 mm/filemap.c:3287
                   generic_file_write_iter+0x37f/0x729 mm/filemap.c:3315
                   call_write_iter include/linux/fs.h:1820 [inline]
                   new_sync_write fs/read_write.c:474 [inline]
                   __vfs_write+0x512/0x760 fs/read_write.c:487
                   vfs_write+0x206/0x550 fs/read_write.c:549
                   ksys_write+0x12b/0x2a0 fs/read_write.c:599
                   do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
                   entry_SYSCALL_64_after_hwframe+0x49/0xbe
 }
 ... key      at: [<ffffffff8b6df800>] __key.51385+0x0/0x40
 ... acquired at:
   mark_irqflags kernel/locking/lockdep.c:3019 [inline]
   __lock_acquire+0x64e/0x49c0 kernel/locking/lockdep.c:3368
   lock_acquire+0x170/0x400 kernel/locking/lockdep.c:3903
   __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
   _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:144
   spin_lock include/linux/spinlock.h:329 [inline]
   shmem_mfill_atomic_pte+0x1657/0x2180 mm/shmem.c:2353
   shmem_mcopy_atomic_pte+0x3a/0x50 mm/shmem.c:2391
   mfill_atomic_pte mm/userfaultfd.c:424 [inline]
   __mcopy_atomic mm/userfaultfd.c:558 [inline]
   mcopy_atomic+0x1019/0x2780 mm/userfaultfd.c:608
   userfaultfd_copy fs/userfaultfd.c:1734 [inline]
   userfaultfd_ioctl+0x4dd/0x3ac0 fs/userfaultfd.c:1884
   vfs_ioctl fs/ioctl.c:46 [inline]
   file_ioctl fs/ioctl.c:501 [inline]
   do_vfs_ioctl+0xcda/0x12e0 fs/ioctl.c:688
   ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
   __do_sys_ioctl fs/ioctl.c:712 [inline]
   __se_sys_ioctl fs/ioctl.c:710 [inline]
   __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
   do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
   entry_SYSCALL_64_after_hwframe+0x49/0xbe


stack backtrace:
CPU: 1 PID: 15786 Comm: syz-executor.5 Not tainted 4.19.111-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x188/0x20d lib/dump_stack.c:118
 print_irq_inversion_bug kernel/locking/lockdep.c:2624 [inline]
 check_usage_backwards.cold+0x1d/0x26 kernel/locking/lockdep.c:2670
 mark_lock_irq kernel/locking/lockdep.c:2755 [inline]
 mark_lock+0x3d9/0x11b0 kernel/locking/lockdep.c:3127
 mark_irqflags kernel/locking/lockdep.c:3019 [inline]
 __lock_acquire+0x64e/0x49c0 kernel/locking/lockdep.c:3368
 lock_acquire+0x170/0x400 kernel/locking/lockdep.c:3903
 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
 _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:144
 spin_lock include/linux/spinlock.h:329 [inline]
 shmem_mfill_atomic_pte+0x1657/0x2180 mm/shmem.c:2353
 shmem_mcopy_atomic_pte+0x3a/0x50 mm/shmem.c:2391
 mfill_atomic_pte mm/userfaultfd.c:424 [inline]
 __mcopy_atomic mm/userfaultfd.c:558 [inline]
 mcopy_atomic+0x1019/0x2780 mm/userfaultfd.c:608
 userfaultfd_copy fs/userfaultfd.c:1734 [inline]
 userfaultfd_ioctl+0x4dd/0x3ac0 fs/userfaultfd.c:1884
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcda/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c849
Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fc03a00ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fc03a00b6d4 RCX: 000000000045c849
RDX: 00000000200a0fe0 RSI: 00000000c028aa03 RDI: 0000000000000004
RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000000005b3 R14: 00000000004c850c R15: 000000000076bf0c
attempt to access beyond end of device
loop4: rw=1, want=425, limit=63
audit: type=1400 audit(1584526175.581:18320): avc:  denied  { map } for  pid=16440 comm="syz-executor.3" path="socket:[309203]" dev="sockfs" ino=309203 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
attempt to access beyond end of device
loop4: rw=2049, want=78, limit=63
buffer_io_error: 310 callbacks suppressed
Buffer I/O error on dev loop4, logical block 77, lost async page write
attempt to access beyond end of device
loop4: rw=2049, want=79, limit=63
Buffer I/O error on dev loop4, logical block 78, lost async page write
attempt to access beyond end of device
loop4: rw=2049, want=80, limit=63
Buffer I/O error on dev loop4, logical block 79, lost async page write
attempt to access beyond end of device
loop4: rw=2049, want=81, limit=63
Buffer I/O error on dev loop4, logical block 80, lost async page write
attempt to access beyond end of device
loop4: rw=2049, want=130, limit=63
Buffer I/O error on dev loop4, logical block 129, lost async page write
attempt to access beyond end of device
loop4: rw=2049, want=131, limit=63
Buffer I/O error on dev loop4, logical block 130, lost async page write
attempt to access beyond end of device
loop4: rw=2049, want=132, limit=63
Buffer I/O error on dev loop4, logical block 131, lost async page write
attempt to access beyond end of device
loop4: rw=2049, want=133, limit=63
Buffer I/O error on dev loop4, logical block 132, lost async page write
attempt to access beyond end of device
loop4: rw=2049, want=142, limit=63
Buffer I/O error on dev loop4, logical block 141, lost async page write
attempt to access beyond end of device
loop4: rw=2049, want=143, limit=63
Buffer I/O error on dev loop4, logical block 142, lost async page write
attempt to access beyond end of device
loop4: rw=2049, want=144, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=145, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=161, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=4521, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=8617, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=12713, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=16809, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=20905, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=25001, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=29097, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=32401, limit=63
attempt to access beyond end of device
loop1: rw=1, want=773, limit=63
attempt to access beyond end of device
loop5: rw=1, want=1197, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=78, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=79, limit=63
loop4: rw=1, want=1705, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=80, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=81, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=114, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=115, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=116, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=117, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=130, limit=63
loop5: rw=2049, want=78, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=131, limit=63
attempt to access beyond end of device
loop5: rw=2049, want=79, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=132, limit=63
loop5: rw=2049, want=80, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=2049, want=81, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=133, limit=63
loop5: rw=2049, want=114, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=2049, want=115, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=157, limit=63
loop5: rw=2049, want=116, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=2049, want=117, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=4869, limit=63
loop5: rw=2049, want=130, limit=63
attempt to access beyond end of device
loop5: rw=2049, want=131, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=2049, want=132, limit=63
loop1: rw=2049, want=8965, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=2049, want=133, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=10997, limit=63
loop5: rw=2049, want=157, limit=63
attempt to access beyond end of device
loop5: rw=2049, want=5293, limit=63
attempt to access beyond end of device
loop5: rw=2049, want=9389, limit=63
attempt to access beyond end of device
loop5: rw=2049, want=11581, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=78, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=79, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=80, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=81, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=130, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=131, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=132, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=133, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=142, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=143, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=144, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=145, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=161, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=5801, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=9897, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=13993, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=18089, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=20921, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=1, want=1045, limit=63
loop5: rw=1, want=741, limit=63
attempt to access beyond end of device
loop4: rw=1, want=881, limit=63
attempt to access beyond end of device
loop5: rw=2049, want=78, limit=63
attempt to access beyond end of device
loop5: rw=2049, want=79, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=2049, want=80, limit=63
attempt to access beyond end of device
loop5: rw=2049, want=81, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=78, limit=63
loop5: rw=2049, want=114, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=79, limit=63
attempt to access beyond end of device
loop5: rw=2049, want=115, limit=63
loop1: rw=2049, want=80, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=2049, want=116, limit=63
loop1: rw=2049, want=81, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=2049, want=117, limit=63
loop1: rw=2049, want=114, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=2049, want=130, limit=63
loop1: rw=2049, want=115, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=2049, want=131, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=116, limit=63
loop5: rw=2049, want=132, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=2049, want=133, limit=63
loop1: rw=2049, want=117, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=2049, want=157, limit=63
loop1: rw=2049, want=130, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=131, limit=63
loop5: rw=2049, want=4837, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=132, limit=63
loop5: rw=2049, want=7165, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=133, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=157, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=5141, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=9237, limit=63
attempt to access beyond end of device
loop1: rw=2049, want=10485, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=78, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=79, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=80, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=81, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=130, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=131, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=132, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=133, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=142, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=143, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=144, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=145, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=161, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=4977, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=9073, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=13169, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=17265, limit=63
attempt to access beyond end of device
loop4: rw=2049, want=18953, limit=63
attempt to access beyond end of device
loop5: rw=1, want=78, limit=63
attempt to access beyond end of device
loop5: rw=1, want=79, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=1, want=893, limit=63
loop5: rw=1, want=80, limit=63
attempt to access beyond end of device
loop5: rw=1, want=81, limit=63
attempt to access beyond end of device
loop5: rw=1, want=114, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=1, want=115, limit=63
loop1: rw=1, want=78, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=1, want=116, limit=63
attempt to access beyond end of device
loop5: rw=1, want=117, limit=63
attempt to access beyond end of device
loop1: rw=1, want=1461, limit=63
loop1: rw=1, want=79, limit=63
loop5: rw=1, want=130, limit=63
attempt to access beyond end of device
loop1: rw=1, want=80, limit=63
attempt to access beyond end of device
loop5: rw=1, want=131, limit=63
attempt to access beyond end of device
attempt to access beyond end of device
loop5: rw=1, want=132, limit=63
attempt to access beyond end of device

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/03/18 10:09 linux-4.19.y 93556fb211fa 0a96a13c .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.